apiVersion: apps/v1
kind: Deployment
metadata:
  name: sonarr
  namespace: stack-arr
spec:
  replicas: 1
  selector:
    matchLabels:
      app: sonarr
  template:
    metadata:
      labels:
        app: sonarr
    spec:
      imagePullSecrets:
      - name: regcred
      containers:
      - name: sonarr
        image: lscr.io/linuxserver/sonarr:4.0.16
        securityContext:
          capabilities:
            add:
              - NET_ADMIN
        ports:
          - containerPort: 8989
            name: webui
        env:
        - name: PUID
          value: "1013"
        - name: PGID
          value: "1013"
        - name: TZ
          value: 'Etc/UTC'
        - name: SONARR__POSTGRES__HOST
          value: 'stolon-proxy-service.postgresql.svc.cluster.local'
        - name: SONARR__POSTGRES__USER
          valueFrom:
            secretKeyRef:
              name: sonarr-secret
              key: username
        - name: SONARR__POSTGRES__PASSWORD
          valueFrom:
            secretKeyRef:
              name: sonarr-secret
              key: password
        - name: SONARR__POSTGRES__MAINDB
          valueFrom:
            secretKeyRef:
              name: sonarr-secret
              key: maindb
        - name: SONARR__POSTGRES__LOGDB
          valueFrom:
            secretKeyRef:
              name: sonarr-secret
              key: logsdb
        volumeMounts:
        - name: config
          mountPath: /config
        - name: downloads
          mountPath: /downloads
        - name: tv
          mountPath: /tv
      volumes:
      - name: config
        persistentVolumeClaim:
          claimName: sonarr-config-pvc
      - name: downloads
        persistentVolumeClaim:
          claimName: qbittorrent-downloads-pvc
      - name: tv
        persistentVolumeClaim:
          claimName: sonarr-tv-pvc